SWIT

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

SWIT records in CISA KEV

No SWIT vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Sessions Time Monitoring Full Automatic 1 record HIGH

Records

2 records

TI-2023-04789 CVE-2023-5203 · GHSA-c568-8x7p-64q6

WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection

HIGH 72

The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitiv…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02202 Published 2023-12-26 Fixed in 1.0.9 CWE-89

TI-2025-18660 CVE-2025-24982 · GHSA-375m-8hf7-5q5g

Cross-site request forgery in SWIT Activity Log WinterLock

LOW 19

Cross-site request forgery vulnerability exists in Activity Log WinterLock versions prior to 1.2.5.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.0017 Published 2025-02-04 Fixed in 1.2.5 CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0